Skip to content

Commit 23e3411

Browse files
dependabot[bot]dependabot[bot]
authored
Chore(deps): bump the github-actions group across 1 directory with 24 updates
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [actions/setup-node](https://github.com/actions/setup-node), [step-security/harden-runner](https://github.com/step-security/harden-runner), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/cache](https://github.com/actions/cache), [tetherto/qvac/.github/actions/setup-llvm](https://github.com/tetherto/qvac), [actions/cache/restore](https://github.com/actions/cache), [actions/cache/save](https://github.com/actions/cache), [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action), [tetherto/qvac/.github/actions/setup-build-host](https://github.com/tetherto/qvac), [softprops/action-gh-release](https://github.com/softprops/action-gh-release), [actions/github-script](https://github.com/actions/github-script), [tetherto/qvac-actions/npm-publish-logic](https://github.com/tetherto/qvac-actions), [tetherto/qvac-actions/npm-dist-tag-determination](https://github.com/tetherto/qvac-actions), [tetherto/qvac-actions/publish-library-to-npm](https://github.com/tetherto/qvac-actions), [dorny/paths-filter](https://github.com/dorny/paths-filter), [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish), [actions/stale](https://github.com/actions/stale), [actions/setup-java](https://github.com/actions/setup-java), [android-actions/setup-android](https://github.com/android-actions/setup-android), [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) and [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) to permit the latest version. Updates `actions/checkout` from 4.2.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4.2.2...v7.0.1) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a309ff8...5fda3b9) Updates `aws-actions/configure-aws-credentials` from 6.0.0 to 6.2.3 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@8df5847...e6de054) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v7) Updates `step-security/harden-runner` from 2.20.0 to 2.20.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@bf7454d...b09bb98) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v7) Updates `actions/cache` from 4 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Commits](actions/cache@v4...v6) Updates `tetherto/qvac/.github/actions/setup-llvm` to 98a6a6b - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](https://github.com/tetherto/qvac/commits/98a6a6b6e8f3866dfdd75052a4071269ce85dc41) Updates `actions/cache/restore` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@6682284...55cc834) Updates `actions/cache/save` from 5.0.4 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@6682284...55cc834) Updates `EnricoMi/publish-unit-test-result-action` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases) - [Commits](EnricoMi/publish-unit-test-result-action@c950f6f...d0a4676) Updates `tetherto/qvac/.github/actions/setup-build-host` to 6e8d3c3 - [Release notes](https://github.com/tetherto/qvac/releases) - [Commits](https://github.com/tetherto/qvac/commits/6e8d3c306a462a58589396cda428d65e015f0d8b) Updates `softprops/action-gh-release` from 2.6.1 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@153bb8e...3d0d988) Updates `actions/github-script` from 7.0.1 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7.0.1...3a2844b) Updates `tetherto/qvac-actions/npm-publish-logic` from 0.1.0 to 0.3.0 - [Commits](tetherto/qvac-actions@0.1.0...bbb0740) Updates `tetherto/qvac-actions/npm-dist-tag-determination` from 0.1.0 to 0.3.0 - [Commits](tetherto/qvac-actions@0.1.0...bbb0740) Updates `tetherto/qvac-actions/publish-library-to-npm` from 0.1.0 to 0.3.0 - [Commits](tetherto/qvac-actions@0.1.0...bbb0740) Updates `dorny/paths-filter` from 4.0.1 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@fbd0ab8...ceb8a2b) Updates `pypa/gh-action-pypi-publish` from 1.13.0 to 1.14.2 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@ed0c539...dc37677) Updates `actions/stale` from 10.2.0 to 11.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@b5d41d4...4391f3d) Updates `actions/setup-java` from 5.2.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...b6effb0) Updates `android-actions/setup-android` from 3.2.2 to 4.0.1 - [Release notes](https://github.com/android-actions/setup-android/releases) - [Commits](android-actions/setup-android@9fc6c4e...40fd30f) Updates `dawidd6/action-download-artifact` from 8 to 21 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](dawidd6/action-download-artifact@20319c5...b6e2e70) Updates `anthropics/claude-code-action` from 1.0.181 to 1.0.190 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@44423bd...5ef2e55) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache/restore dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache/save dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: android-actions/setup-android dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.190 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '21' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: EnricoMi/publish-unit-test-result-action dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: step-security/harden-runner dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: tetherto/qvac-actions/npm-dist-tag-determination dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: tetherto/qvac-actions/npm-publish-logic dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: tetherto/qvac-actions/publish-library-to-npm dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-build-host dependency-version: 6e8d3c3 dependency-type: direct:production dependency-group: github-actions - dependency-name: tetherto/qvac/.github/actions/setup-llvm dependency-version: 98a6a6b dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 447853c commit 23e3411

149 files changed

Lines changed: 811 additions & 811 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/benchmark-asr-ggml.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -367,7 +367,7 @@ jobs:
367367
df -h
368368
369369
- name: Checkout repository
370-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
370+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
371371
with:
372372
repository: ${{ github.event.inputs.repository || github.repository }}
373373
ref: ${{ github.event.inputs.ref || github.ref }}
@@ -380,7 +380,7 @@ jobs:
380380
sudo apt-get install -y ffmpeg build-essential cmake unzip curl
381381
382382
- name: Set up Python
383-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
383+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
384384
with:
385385
python-version: '3.14'
386386

@@ -458,7 +458,7 @@ jobs:
458458
459459
- name: Configure AWS credentials via OIDC (Arabic dataset)
460460
if: matrix.engine == 'whisper' && startsWith(github.event.inputs.dataset, 'arabic_')
461-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
461+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
462462
with:
463463
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
464464
aws-region: eu-central-1
@@ -524,7 +524,7 @@ jobs:
524524
# ---------------- parakeet-only model staging ----------------
525525
- name: Configure AWS credentials via OIDC (Parakeet GGUF)
526526
if: matrix.engine == 'parakeet'
527-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
527+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
528528
with:
529529
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
530530
aws-region: eu-central-1

‎.github/workflows/benchmark-cli-serve-openai-providers.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -57,12 +57,12 @@ jobs:
5757
timeout-minutes: 15
5858
steps:
5959
- name: Checkout
60-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
60+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
6161
with:
6262
ref: ${{ github.sha }}
6363

6464
- name: Setup Node
65-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
65+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
6666
with:
6767
node-version: "22"
6868
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -101,7 +101,7 @@ jobs:
101101
printf 'target_sha=%s\n' "$normalized_target_sha" >> "$GITHUB_OUTPUT"
102102
103103
- name: Checkout target SHA
104-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
104+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
105105
with:
106106
ref: ${{ steps.resolve.outputs.target_sha }}
107107
persist-credentials: false
@@ -118,7 +118,7 @@ jobs:
118118
fi
119119
120120
- name: Setup Node
121-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
121+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
122122
with:
123123
node-version: "22"
124124
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -143,20 +143,20 @@ jobs:
143143
timeout-minutes: 15
144144
steps:
145145
- name: Harden Runner
146-
uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
146+
uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
147147
with:
148148
# Audit npm, raw GitHub spec fetches, and artifact-service egress
149149
# before promoting this provider-free preview path to block mode.
150150
egress-policy: audit
151151

152152
- name: Checkout validated SHA
153-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
153+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
154154
with:
155155
ref: ${{ needs.validate-target.outputs.target_sha }}
156156
persist-credentials: false
157157

158158
- name: Setup Node
159-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
159+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
160160
with:
161161
node-version: "22"
162162
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -173,7 +173,7 @@ jobs:
173173
174174
- name: Upload coverage report
175175
if: always()
176-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
176+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
177177
with:
178178
name: openai-coverage-report-${{ github.run_id }}
179179
path: ${{ env.BENCH_DIR }}/results/coverage-preview/
@@ -197,13 +197,13 @@ jobs:
197197
working-directory: .
198198

199199
- name: Checkout validated SHA
200-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
200+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
201201
with:
202202
ref: ${{ needs.validate-target.outputs.target_sha }}
203203
persist-credentials: false
204204

205205
- name: Setup Node
206-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
206+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
207207
with:
208208
node-version: "22"
209209
# packages/*/package-lock.json is gitignored in this monorepo — no npm cache path.
@@ -288,7 +288,7 @@ jobs:
288288
289289
- name: Upload results
290290
if: always() && inputs.mode == 'full'
291-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
291+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
292292
with:
293293
name: serve-openai-providers-${{ github.run_id }}
294294
path: ${{ env.BENCH_DIR }}/results/

‎.github/workflows/benchmark-embed-llamacpp.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -206,15 +206,15 @@ jobs:
206206
free -h
207207
208208
- name: Checkout repository
209-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
209+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
210210

211211
- name: Setup Node.js
212-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
212+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
213213
with:
214214
node-version: lts/*
215215

216216
- name: Setup Python
217-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
217+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
218218
with:
219219
python-version: '3.14'
220220
cache: pip
@@ -226,7 +226,7 @@ jobs:
226226
- name: Get vcpkg cache (monorepo)
227227
if: inputs.addon_version == ''
228228
id: cache-vcpkg
229-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
229+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
230230
with:
231231
key: linux-x64-${{ hashFiles(format('{0}/vcpkg.json', env.WORKDIR), format('{0}/vcpkg-configuration.json', env.WORKDIR), format('{0}/vcpkg/ports/**', env.WORKDIR), 'vcpkg.json', 'vcpkg-configuration.json', 'vcpkg/ports/**') }}
232232
path: ${{ env.WORKDIR }}/vcpkg/cache
@@ -397,7 +397,7 @@ jobs:
397397
fi
398398
399399
- name: Upload benchmark results
400-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
400+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
401401
if: always()
402402
with:
403403
name: benchmark-results-${{ github.run_number }}
@@ -407,7 +407,7 @@ jobs:
407407
retention-days: 90
408408

409409
- name: Upload server logs
410-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
410+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
411411
if: failure()
412412
with:
413413
name: server-logs-${{ github.run_number }}

‎.github/workflows/benchmark-llm-llamacpp.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -256,15 +256,15 @@ jobs:
256256
free -h
257257
258258
- name: Checkout repository
259-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
259+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
260260

261261
- name: Setup Node.js
262-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
262+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
263263
with:
264264
node-version: lts/*
265265

266266
- name: Setup Python
267-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
267+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
268268
with:
269269
python-version: '3.14'
270270
cache: pip
@@ -277,7 +277,7 @@ jobs:
277277
- name: Get vcpkg cache
278278
if: inputs.addon_version == ''
279279
id: cache-vcpkg
280-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
280+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
281281
with:
282282
key: linux-x64-${{ hashFiles( format('{0}/vcpkg.json', inputs.workdir), format('{0}/vcpkg-configuration.json', inputs.workdir), format('{0}/vcpkg/ports/**', inputs.workdir) ) }}
283283
path: ${{ inputs.workdir }}/vcpkg/cache
@@ -441,7 +441,7 @@ jobs:
441441
fi
442442
443443
- name: Upload benchmark results
444-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
444+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
445445
if: always()
446446
with:
447447
name: benchmark-results-${{ github.run_number }}
@@ -451,7 +451,7 @@ jobs:
451451
retention-days: 90
452452

453453
- name: Upload server logs
454-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
454+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
455455
if: failure()
456456
with:
457457
name: server-logs-${{ github.run_number }}

‎.github/workflows/benchmark-ocr-ggml.yml‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -109,12 +109,12 @@ jobs:
109109

110110
steps:
111111
- name: Checkout repository
112-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
112+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
113113
with:
114114
submodules: recursive
115115

116116
- name: Set up Node.js
117-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
117+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
118118
with:
119119
node-version: lts/*
120120

@@ -125,7 +125,7 @@ jobs:
125125
run: echo "VCPKG_ROOT=$VCPKG_INSTALLATION_ROOT" >> $GITHUB_ENV
126126

127127
- name: Cache vcpkg packages
128-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
128+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
129129
with:
130130
key: vcpkg-linux-x64-ocr-ggml-${{ hashFiles('packages/ocr-ggml/**/vcpkg.json', 'packages/ocr-ggml/**/CMakeLists.txt') }}
131131
path: |
@@ -135,7 +135,7 @@ jobs:
135135
restore-keys: vcpkg-linux-x64-ocr-ggml-
136136

137137
- name: Cache ccache
138-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
138+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
139139
with:
140140
key: ccache-linux-x64-ocr-ggml-${{ github.sha }}
141141
path: ~/.ccache
@@ -147,7 +147,7 @@ jobs:
147147
sudo apt-get install -y cmake wget build-essential ccache
148148
149149
- name: Setup LLVM
150-
uses: tetherto/qvac/.github/actions/setup-llvm@0c819dd1110e4902223b1f7646cc0f1be2c9bc5c
150+
uses: tetherto/qvac/.github/actions/setup-llvm@98a6a6b6e8f3866dfdd75052a4071269ce85dc41
151151

152152
- name: Setup Vulkan SDK
153153
uses: tetherto/qvac/.github/actions/setup-vulkan-sdk@0bbdca93da303a0b1634ba14a89cec085621078d
@@ -162,7 +162,7 @@ jobs:
162162
ccache -z
163163
164164
- name: Cache npm dependencies
165-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # 5.0.4
165+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # 6.1.0
166166
with:
167167
key: npm-ocr-ggml-${{ hashFiles('packages/ocr-ggml/package-lock.json') }}
168168
path: ~/.npm
@@ -186,7 +186,7 @@ jobs:
186186
run: ccache -s
187187

188188
- name: Upload build artifact
189-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
189+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
190190
with:
191191
name: qvac-ocr-ggml-build
192192
path: |
@@ -241,12 +241,12 @@ jobs:
241241
run: git config --global core.longpaths true
242242

243243
- name: Checkout repository
244-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
244+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
245245
with:
246246
submodules: recursive
247247

248248
- name: Set up Node.js
249-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # 6.3.0
249+
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # 7.0.0
250250
with:
251251
node-version: 20
252252

@@ -255,7 +255,7 @@ jobs:
255255

256256
- name: Set up Python
257257
if: runner.environment == 'github-hosted'
258-
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # 6.2.0
258+
uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # 7.0.0
259259
with:
260260
python-version: '3.14'
261261
cache: pip
@@ -326,7 +326,7 @@ jobs:
326326
"$HOME/.local/aws-cli/aws" --version
327327
328328
- name: Configure AWS credentials via OIDC
329-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # 6.0.0
329+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # 6.2.3
330330
with:
331331
role-to-assume: ${{ secrets.AWS_OIDC_ROLE_ARN }}
332332
aws-region: eu-central-1
@@ -498,15 +498,15 @@ jobs:
498498
PYTHONUNBUFFERED: 1
499499

500500
- name: Upload evaluation results
501-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
501+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
502502
if: always()
503503
with:
504504
name: ocr-ggml-benchmark-results-${{ matrix.id }}
505505
path: ${{ env.PKG_DIR }}/benchmarks/quality_eval/results/*
506506
retention-days: 30
507507

508508
- name: Upload evaluation logs
509-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
509+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
510510
if: failure()
511511
with:
512512
name: ocr-ggml-benchmark-logs-${{ matrix.id }}
@@ -522,7 +522,7 @@ jobs:
522522

523523
steps:
524524
- name: Checkout summary renderer
525-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
525+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # 7.0.1
526526
with:
527527
sparse-checkout: |
528528
packages/ocr-ggml/benchmarks/quality_eval/render_summary.py
@@ -554,7 +554,7 @@ jobs:
554554
--limit "$LIMIT" >> "$GITHUB_STEP_SUMMARY"
555555
556556
- name: Upload consolidated results
557-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # 7.0.0
557+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # 7.0.1
558558
with:
559559
name: ocr-ggml-benchmark-consolidated
560560
path: results

0 commit comments

Comments
 (0)